CVE-2025-26389

A vulnerability has been identified in OZW672 All versions V8.0, OZW772 All versions V8.0. The web service in affected devices does not sanitize the input parameters required for the exportDiagramPage endpoint. This could allow an unauthenticated remote attacker to execute arbitrary code with roo...

CVE-2025-26389

A vulnerability has been identified in OZW672 All versions V8.0, OZW772 All versions V8.0. The web service in affected devices does not sanitize the input parameters required for the exportDiagramPage endpoint. This could allow an unauthenticated remote attacker to execute arbitrary code with roo...

CVE-2025-26389

Siemens OZW672 and OZW772 web servers (embedded in affected devices) prior to V8.0 are vulnerable. The exportDiagramPage endpoint does not sanitize input parameters, enabling an unauthenticated remote attacker to execute arbitrary code with root privileges over the network. Affected versions: OZW...

CVE-2025-26389

A vulnerability has been identified in OZW672 All versions V8.0, OZW772 All versions V8.0. The web service in affected devices does not sanitize the input parameters required for the exportDiagramPage endpoint. This could allow an unauthenticated remote attacker to execute arbitrary code with roo...